Thursday, April 11, 2013

"SQL Injection" Viruses Still Going Strong

Sometimes called "mass-injection attacks," this class of internet-based computer attack appears to be responsible for the recent crippling of St. Edward's University's "New Literati" online literary adventure. Although not technically a "virus" (though certainly malware), this type of computer bug infects web servers, from which it tries to exploit user traffic through various means, often redirecting users to other malicious websites that may try to trick them (via misleading pop-up alerts or various scare tactics) into downloading more directly exploitative software like fake Anti-Virus platforms. How the New Literati website became compromised is not yet entirely clear, but blogs and other web presences that are easily modifiable by relatively amateur computer users are frequent victims of such attacks. Naive data processing in basic webpage authoring tools is one way hackers gain access, where malicious code "escapes" its proper place in a computer and can gain access to system processes, as in this somewhat humorous attempt:
Hackers don't usually target traffic cameras, though; one of the last big outbreaks was the so-called LizaMoon attack in the spring of 2011, where possibly millions of websites were infected (PCWorld), and users of those websites were bounced around the internet (often unknowingly, in hidden website frames or invisible pop-up windows) until they were presented with this official-seeming notice:

And shortly invited (read: "extorted") to purchase a "solution":

Being hacked, scammed, or even targeted can be scary, but trusting random pop-ups is probably not the best way to soothe your fears. So watch your virtual backs, keep your anti-virus software up to date, but above all surf responsibly. (No (sorry), you are NOT the 1,000,000th visitor, nor have you won a prize. And pressing "Escape" is usually the best way to close an unwelcome faked system alert.)